The data subject shall have the right to obtain from the controller confirmation as to whether or not operational personal data concerning him or her are processed, and where that is the case, have the right to access operational personal data and the following information:
(a) the purposes of and legal basis for the processing;
(b) the categories of operational personal data concerned;
(c) the recipients or categories of recipients to whom the operational personal data have been disclosed, in particular recipients in third countries or international organisations;
(d) where possible, the envisaged period for which the operational personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the controller rectification or erasure of operational personal data or restriction of processing of operational personal data concerning the data subject;
(f) the right to lodge a complaint with the European Data Prote
…